AppFusions Doxygen for Atlassian Confluence Cross-Site Scripting Vulnerability

Doxygen is a popular documentation generator and tool for writing software reference documentation. A cross-site scripting vulnerability exists in AppFusions Doxygen for Atlassian Confluence where the parameter file is not filtered in the DoxygenFileServlet.java file. This allows an attacker to...

Tyco Cms download.php parameter file arbitrary File Download vulnerability

No description provided by source...

Times bright China e-Learning system /resin-doc/examples/security-basic/viewfile parameter file arbitrary file read vulnerability

No description provided by source...

UBUNTU-CVE-2016-3125

The modtls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman DH key to be used and consequently allow attackers to have unspecified impact via unknown vectors...

Updated moodle packages fix CVE-2015-1493

Updated moodle package fixes security vulnerability: In Moodle before 2.6.8, parameter "file" passed to scripts serving JS was not always cleaned from including "../" in the path, allowing to read files located outside of moodle directory. All OS's are affected, but especially vulnerable are...

WP Online Store Plugin for WordPress Multiple Parameter File Disclosure

The WP Online Store Plugin for WordPress installed on the remote host is affected by an information disclosure vulnerability due to a failure to properly sanitize user-supplied input to the 'turl' and 'file' parameters. An unauthenticated, remote attacker can exploit this to view arbitrary files ...

eLouai's Force Download Script file Parameter File Disclosure

The version of eLouai's Force Download Script hosted on the remote web server does not sanitize user-supplied input to the 'file' parameter before using it to return the contents of a file. An unauthenticated, remote attacker can exploit this issue to disclose the contents of sensitive files on t...

Serendipity serendipity[charset] Parameter Local File Inclusion

Binary data 3835.prm...

[SA20119] TR Newsportal "file_newsportal" Parameter File Inclusion Vulnerability

TITLE: TR Newsportal "filenewsportal" Parameter File Inclusion Vulnerability SECUNIA ADVISORY ID: SA20119 VERIFY ADVISORY: http://secunia.com/advisories/20119/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: TR Newsportal 0.x http://secunia.com/product/9955/...

CVE-1999-0036

IRIX login program with a nonzero LOCKOUT parameter allows creation or damage to files...